PatchTheCVECVE-2024-12483: A vulnerability classified as problematic has been found in Dromara UJCMS up to 9.6.3
CVE-2024-12483 is a low-severity flaw (CVSS 3.7) affecting ujcms. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
A vulnerability classified as problematic has been found in Dromara UJCMS up to 9.6.3. This affects an unknown part of the file /users/id of the component User ID Handler. The manipulation leads to authorization bypass. It is possible to initiate the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used.
Why this priority
- Public exploit reference
- Remotely exploitable, no login, no user action
A fixed release or distro patch exists.
Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Public exploits and detection
Public code exists for this CVE. Treat unpatched systems as at risk, and only run PoCs in a lab.
- Exploit-DB: UJCMS 9.6.3 - User Enumeration via IDOR
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2024-12483?
ujcms: upgrade to 9.6.3. Exact commands for each OS are on this page.
Is CVE-2024-12483 being exploited?
CVE-2024-12483 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2024-12483 affect?
CVE-2024-12483 affects ujcms. Severity is low (CVSS 3.7). A vulnerability classified as problematic has been found in Dromara UJCMS up to 9.6.3. This affects an unknown part of the file /users/id of the component User ID Handler. The manipulation leads to authorization bypass. It is possible to in
How urgent is CVE-2024-12483?
Priority 45/100. Public exploit reference; Remotely exploitable, no login, no user action
Related CVEs
- CVE-2026-2954 MEDIUM 6.3 DOWNGRADE A vulnerability was found in Dromara UJCMS 10.0.2
- CVE-2026-2953 MEDIUM 5.4 DOWNGRADE A vulnerability has been found in Dromara UJCMS 101.2
- CVE-2025-2491 LOW 2.4 DOWNGRADE A vulnerability classified as problematic has been found in Dromara ujcms 9.7.5
- CVE-2025-2490 LOW 2.4 DOWNGRADE A vulnerability was found in Dromara ujcms 9.7.5
- CVE-2024-55452 MEDIUM 5.4 DOWNGRADE A URL redirection vulnerability exists in UJCMS 9.6.3 due to improper validation of URLs in the upload and ren